Technical Information
- %TEMP%\kxtwmop9rtw.dll
- http://ci###ire.com/7cfykc4
- http://sh###rat.net/6ucp31q
- http://fa####-mushtaq.com/l1tg60n
- DNS ASK ci###ire.com
- DNS ASK sh###rat.net
- DNS ASK fa####-mushtaq.com
- '%WINDIR%\syswow64\rundll32.exe' %TEMP%\KXTWMO~1.DLL,0001